Schiocco Support Board — known CVE vulnerabilities

Every CVE whose affected-product data names Schiocco Support Board, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2025-4828 — CVSS 9.8 (critical): The Support Board plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the…
• CVE-2025-4855 — CVSS 9.8 (critical): The Support Board plugin for WordPress is vulnerable to unauthorized access/modification/deletion of data due to use of hardcoded default…
• CVE-2026-4815 — CVSS 8.8 (high): A SQL Injection vulnerability has been found in Support Board v3.7.7. This vulnerability allows an attacker to retrieve, create, update and…
• CVE-2021-24823 — CVSS 8.1 (high): The Support Board WordPress plugin before 3.3.6 does not have any CSRF checks in actions handled by the include/ajax.php file, which could…
• CVE-2021-24807 — CVSS 5.4 (medium): The Support Board WordPress plugin before 3.3.5 allows Authenticated (Agent+) users to perform Cross-Site Scripting attacks by placing a…
• CVE-2026-4816 — CVSS 5.4 (medium): A Reflected Cross Site Scripting (XSS) vulnerability has been found in Support Board v3.7.7. This vulnerability allows an attacker to…